mutt 2.0.2 released

--JN4xI77YkhWdWN8q
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Mutt Users,

I've just released version 2.0.2.  Instructions for downloading are=20
available at <http://www.mutt.org/download.html>, or the tarball can be=20
directly downloaded from <http://ftp.mutt.org/pub/mutt/>. Please take=20
the time to verify the signature file against my public key.

This is an important bug fix release, addressing CVE-2020-28896.  Mutt=20
had incorrect error handling when initially connecting to an IMAP=20
server, which could result in an attempt to authenticate without=20
enabling TLS.

Thanks to Gabriel Salles-Loustau for discovering the problem, and=20
including detailed information and a reproducing example in his report!

Also thanks to Richard Russon for coordinating the release with Mutt.

-Kevin

--JN4xI77YkhWdWN8q
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Vq73
-----END PGP SIGNATURE-----

--JN4xI77YkhWdWN8q--